Description
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1881637
https://github.com/amqphub/amqp-10-resource-adapter/issues/13
https://security.netapp.com/advisory/ntap-20201210-0001/
Related Vulnerabilities
CVE-2022-25167 Vulnerability in maven package org.apache.flume.flume-ng-sources:flume-jms-source
CVE-2023-32695 Vulnerability in npm package socket.io-parser
CVE-2018-16487 Vulnerability in maven package org.webjars.npm:lodash
CVE-2011-0509 Vulnerability in maven package com.vaadin:vaadin
CVE-2023-3308 Vulnerability in maven package com.whaleal.icefrog:icefrog-all